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Claims : 



1 LA mobile application security system, comprising: 

2 one or more nodes of a peer-to-peer network wherein each node is configured to execute 

3 a mobile application; 

4 a central security enforcement node connected to each node of the peer-to-peer network 

5 for controlling the security of a mobile application; 

6 the central security enforcement node further comprising means for monitoring the 



7 security of the mobile application as it jumps between the nodes wherein data about the mobile 

8 application is communicated to the central security enforcement node when the mobile 

9 application is communicated from a first node to a second node; and 



1 0 wherein the security monitoring means further comprises means for detecting unwanted 

1 1 changes in the code associated with the mobile application when the mobile application is 

12 jumping between hosts. 

1 2. The system of Claim 1 , wherein the detecting means further comprises means for 



2 storing a copy of the mobile application when the mobile application is created by having the 

3 creating node send a copy of the mobile application to the central security enforcement node, 

4 means for receiving data about the mobile application when it is received by another node and 

5 means for comparing the code of the mobile application received by the other node to the stored 

6 copy of the mobile application to determine if changes have been made to the code of the mobile 



7 application. 

1 3 . The system of Claim 1 , wherein the detecting means further comprises means for 

2 receiving a checksum of the mobile application when the mobile application is created, means 
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3 for receiving the mobile application after it is sent to another node, means for computing the 

4 checksum of the received mobile application and means for comparing the checksum of the 

5 mobile application after it is received by another node to the stored checksum of the mobile 

6 application to determine if changes have been made to the code of the mobile application. 

1 4. A mobile application security system, comprising; 

2 one or more nodes of a peer-to-peer network wherein each node is configured to execute 

3 a mobile application; 

4 a central security enforcement node connected to each node of the peer-to-peer network 

5 for controlling the security of a mobile application; 

6 the central security enforcement node further comprising means for monitoring the 

7 security of the mobile application as it jumps between the nodes wherein data about the mobile 

8 application is communicated to the central security enforcement node when the mobile 

9 application is communicated from a first node to a second node; and 

I o wherein the security monitoring means further comprises means for preventing a node 

I I from transmitting hostile code in a mobile application to another node. 

1 5 . The system of Claim 4, wherein the preventing means further comprises means 

2 for determining if the node dispatching the mobile application is trusted, means for stripping the 

3 code from an initially received mobile application if the host is not trusted, means for saving the 

4 code of the mobile application, and means, when requested by another node, for providing the 

5 code for the mobile application to the requesting node. 

1 6. A mobile application security system, comprising: 
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2 one or more nodes of a peer-to-peer network wherein each node is configured to execute 

3 a mobile application; 

4 a central security enforcement node connected to each node of the peer-to-peer network 

5 for controlling the security of a mobile application; 

6 the central security enforcement node further comprising means for monitoring the 

7 security of the mobile application as it jumps between the nodes wherein data about the mobile 

8 application is communicated to the central security enforcement node when the mobile 

9 application is communicated from a first node to a second node; and 

*; 10 wherein security monitoring means further comprises means for detecting unwanted 

"jp 1 1 changes in the state of the mobile application. 

ill £ 

: ;C 1 7. The system of Claim 6, wherein the detecting means further comprises means for 



1 2 saving a copy of the state of a mobile application received from a node that received the mobile 

C 3 application, means for receiving data about the same mobile application after a jump to another 

§ 4 node and means for comparing the state of the mobile application after the jump to another node 

5 with the stored state of the mobile application to ensure that the state of the mobile application 



6 has not changed. 

1 8. A mobile application security system, comprising: 

2 one or more nodes of a peer-to-peer network wherein each node is configured to execute 

3 a mobile application; 

4 a central security enforcement node connected to each node of the peer-to-peer network 

5 for controlling the security of a mobile application; 
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6 the central security enforcement node farther comprising means for monitoring the 

7 security of the mobile application as it jumps between the nodes wherein data about the mobile 

8 application is communicated to the central security enforcement node when the mobile 

9 application is communicated from a first node to a second node; and 

10 wherein the security monitoring means further comprises means for detecting unwanted 

1 1 changes in the itinerary of the mobile application. 

1 9. The system of Claim 8, wherein the detecting means further comprises means for 

2 saving a copy of the itinerary of a mobile application received from the node that received the 

D 

^ 3 mobile application, means for receiving the same mobile application after a jump to another node 

p 4 and means for comparing the itinerary of the mobile application after the jump to another node 

■P 5 with the stored itinerary of the mobile application to ensure that the itinerary of the mobile 

% 6 application has not changed. 

r 1 1 0. The system of Claim 8, wherein the itinerary comprises past historical itinerary 

C 2 data. 

1 1 1 . A mobile application security method, comprising: 

2 receiving data about a mobile application at a central security enforcement node each 

3 time the mobile application jumps between a first node and a second node of a peer-to-peer 

4 network; and 

5 monitoring the security of the mobile application as it jumps between the nodes, wherein 

6 the security monitoring further comprises detecting unwanted changes in the code associated 

7 with the mobile application when the mobile application is jumping between hosts. 
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1 1 2. The method of Claim 1 1 , wherein the detecting further comprises storing a copy 

2 of the mobile application when the mobile application is created, receiving the mobile 

3 application after it is received by another node and comparing the code of the mobile application 

4 after it is received by another node to the stored copy of the mobile application to determine if 

5 changes have been made to the code of the mobile application. 

1 1 3 . A mobile application security method, comprising: 

2 receiving data about a mobile application at a central security enforcement node each 

3 time the mobile application jumps between a first node and a second node of a peer-to-peer 
*t 4 network; and 

J 5 monitoring the security of the mobile application as it jumps between the nodes, wherein 

=P 6 the security monitoring further comprises preventing a host from transmitting hostile code in a 

L 7 mobile application to another node. 

i 14. The method of Claim 13, wherein the preventing further comprises determining if 

p 2 the node dispatching the mobile application is trusted, stripping the code from a mobile 

3 application if the host is not trusted, saving the code of the mobile application, and, when 

4 requested by another node, providing the code for the mobile application to the requesting node. 

1 15. A mobile application security method, comprising: 

2 receiving data about a mobile application at a central security enforcement node each 

3 time the mobile application jumps between a first node and a second node of a peer-to-peer 

4 network; and 
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monitoring the security of the mobile application as it jumps between the nodes, wherein 
the security monitoring further comprises detecting unwanted changes in the state of the mobile 
application. 

16. The method of Claim 15, wherein the detecting further comprises saving a copy of 
the state of a received mobile application, receiving data about the same mobile application after 
a jump to another node and comparing the state of the mobile application after the jump to 
another node with the stored state of the mobile application to ensure that the state of the mobile 
application has not changed. 

17. A mobile application security method, comprising: 

receiving data about a mobile application at a central security enforcement node each 
time the mobile application jumps between a first node and a second node of a peer-to-peer 
network; and 

monitoring the security of the mobile application as it jumps between the nodes, wherein 
the security monitoring further comprises detecting unwanted changes in the itinerary of the 
mobile application. 

18. The method of Claim 17, wherein the detecting further comprises saving a copy of 
the itinerary of a received mobile application, receiving data about the same mobile application 
after a jump to another node and comparing the itinerary of the mobile application after the jump 
to another node with the stored itinerary of the mobile application to ensure that the itinerary of 
the mobile application has not changed. 

19. The method of Claim 17, wherein the itinerary comprises past historical itinerary 

data. 
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1 20. A mobile application security method, comprising: 

2 receiving data about a mobile application at a central security enforcement node each 

3 time the mobile application jumps between a first node and a second node of a peer-to-peer 

4 network; and 

5 monitoring the security of the mobile application as it jumps between the nodes, wherein 

6 the security monitoring further comprises preventing untrusted hosts from initially launching 

7 mobile applications 
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